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BACKGROUND OF THE INVENTION 

1. Field of the Invention 

The present invention relates to a service providing method 
and a service providing system from which a card specifying an 
15 individual can be easily obtained and plural applications can be 
loaded in a single card as desired by a user who holds the card. 

2. Description of the Related Art 

In recent years, individual specified cards that specify 
individuals who use such cards as, for example, a financial card, a 
20 point service card (Loyalty card), and individual unspecified cards 
(general-purpose cards) that do not specify individuals using cards 
such as, for example, a pre-paid card etc. are widely known. 

In order to acquire such an individual specified card especially, 
a user applies for the issue of a card to a prescribed card issue 
25 organization. When receives the application, the card issue 

organization sets an individual data of that user in a card after 
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confirming the identity of the user, and it becomes possible to issue 
a card. 

In the case of the individual specified card, as individual data 
is set in the card, there is such a merit that the justifiability of a 
5 card with a user (a card holder) can be ensured. However, as the 
card is issued only by an exclusive card issue organization, it is 
required for a user to make the application of the issue of a card to a 
card issue organization. 

That is, for a user, in order to apply the card issue, it is 
10 necessary to go to a prescribed place (for example, a location of the 
card issue organization) to make the application directly or such a 
troublesome step as to send personal data to a prescribed place was 
indispensable. Further, it was indispensable for the card issue 
organization to take a troublesome step to confirm the identity of a 
15 user and send an issued card to a user. 

Further, there are such problems that a user is able to choose 
services that are offered by one card only within the range of 
services offered by a card issue organization and kinds of 
applications that can be loaded in a card is restricted. Moreover, 
20 the design of the card published can also be chosen only in the range 
of designs that are offered by a card issue organization. 

As a result, when a user desires to receive respective services 
offered by different card issue organizations, a user has to apply the 
issue of a card to each of different card issue organizations and 
25 obtain respective cards from each of different card issue 

organizations. Therefore, there was also such a problem that the 
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number of cards held by a user tends to increase. 

Such the problem is also applicable when acquiring an 
individual unspecified card. That is, in the case of an individual 
unspecified card, there is a merit that anybody is able to use a card 
5 simply when purchases it but there is also a demerit that the 

justifiability of a user cannot be confirmed because no individual 
data is set in a card. Further, as an individual unspecified card is 
issued by a card issue organization differing from an individual 
specified card, there is also such a problem that the number of cards 

10 tend to further increase. 

In order to solve such problems, an IC card that is commonly 
usable for plural systems is disclosed in Japanese Patent 
Application No. (TOKU-KAI-HEI) 11- 39445, wherein a system to 
download new applications in the IC card is also disclosed. 

15 However, in Japanese Patent Application (TOKU-KAI-HEI) No. 

11-39445, a system to initially download an application in an IC 
card by setting an installing key received from an application issuer 
system in. an application downloading terminal that is installed at a 
separate place is disclosed. However, there was such a problem 

20 that this disclosed system required a user to perform steps at two 
stages and the user was burdened with a troublesome process. 



BRIEF SUMMARY OF THE INVENTION 
The present invention was made in view of the above points 
25 and it is an object to provide a service providing method and a 

service providing system that makes it easy to obtain an individual 
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specified card and unload plural applications in a single card as 
desired by a card holder. 

According to the embodiment of the present invention, there is 
provided a service providing method for providing services to a first 
5 portable electronic device holder via the terminal device that 

handles the portable electronic device, based on the first portable 
electronic device having a memory storing application data relative 
to the service provision and pre-storing individual data of a holder 
by a prescribed organization. The service providing method 
10 comprises- checking justifiability of the first portable electronic 

device based on the data stored in the first portable electronic device 
when the directive data for the application downloading from the 
terminal device! demanding the setting of a portable electronic 
device to download the application data when the first portable 
15 electronic device is confirmed to be justifiable! reading out 
application data desired by a holder from the memory when 
receiving data showing the completion of setting the first portable 
electronic device or a second portable electronic device differing 
from the first portable electronic device as a portable electronic 
20 device in which an application is downloaded; and transmitting the 
read application data to the terminal device by directing download 
of the application to the portable electronic device that is set as 
described above. 

Further, according to the embodiment of the present invention, 
25 there is provided a service providing system for providing services to 
a holder of the first portable electronic device via the terminal 
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device handling the portahle electronic device using the first 
portable electronic device pre-storing at least individual data of the 
holder by a prescribed organization. The service providing system 
comprises* means for storing application data relative to the 
5 provision of services; means for receiving the direction for the 

application downloading from the terminal device and various data 
transmitted from the holder; justifiability check means for checking 
justifiability of the first portable electronic device based on the data 
stored in the first portable electronic device received by the 
10 receiving means when the download direction is received by the 

receiving means; setting demand means for demanding the setting of 
a portable electronic device to download application data when the 
first electronic device is confirmed justifiable by the justifiability 
check means; means for reading application data desired by the 
15 holder from the storing means when data showing the completion of 
the setting of the first portable electronic device or the second 
electronic device differing from the first electronic device is received 
by the receiving means as a portable electronic device for 
downloading applications; and means for transmitting the 
20 application data read by the reading means by directing the 

download of the application for the set portable electronic device to 
the terminal device. 



BRIEF DESCRIPTION OF THE DRAWINGS 
25 FIG. 1 is a conceptual diagram showing a card application 

download system in an embodiment of a service providing system of 
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this invention! 

FIG. 2 is a schematic block diagram briefly showing the 
construction of an application download provider! 

FIG. 3 is a block diagram briefly showing the construction of a 
5 service applying company! 

FIG. 4 is a block diagram the brief construction relative to PC 
and IC card reader/writer at the end user side! 

FIG. 5 is a block diagram showing a modified example of the 
construction relative to PC and IC card reader/writer when treating 
10 2 sheets of IC cards for PC! 

FIG. 6 is a block diagram showing a modified example of the 
construction relative to PC and IC card reader/writer when handling 
2 sheets of IC card for PC! 

FIG. 7 is a block diagram briefly showing IC card functions! 
15 FIG. 8 is a block diagram briefly showing IC card control! 

FIG. 9 is a map showing the internal structure of IC card data 
memory! 

FIG. 10 is a map showing a table relative to individual data 
stored in EEPROM of IC card! 
20 FIG. 11 is a flowchart for explaining a master card providing 

method to a user who is a card carrier! 

FIG. 12 is a flowchart for explaining a master card providing 
method to a user who is a card carrier! 

FIG. 13 is a flowchart for explaining an affiliated card 
25 acquiring (purchasing) method by a user who is a card carrier! 

FIG. 14 is a flowchart for explaining an affiliated card 
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acquiring (purchasing) method by a user who is a card carrier; 

FIG. 15 is a flowchart for explaining an affiliated card 
acquiring (purchasing) method by a user who is a card carrier; 
FIG. 16 is a plan view showing the surface of an IC card for 
5 free charge delivering; 

FIG. 17 is a map showing data stored in an internal memory of 
an IC card for free charge delivering; 

FIG. 18 is a diagram for explaining printing of the surface of 
an IC card purchased or delivered without charge; 
10 FIG. 19 is a flowchart for explaining the outline of the 

application download process to IC card; 

FIG. 20 is a flowchart for explaining the operation between a 
user's PC and a provider regarding to the application download 
process to IC card; 
15 FIG. 21 is a flowchart for explaining the operation between a 

user's PC and a provider regarding to the application download 
process to IC card; 

FIG. 22 is a flowchart for explaining a modified example of the 
application download process to IC card; 
20 FIG. 23 is a flowchart for explaining the operation between a 

user's PC and a provider regarding a modified example of the 
application download process to IC card; 

FIG. 24 is a flowchart for explaining the operation between a 
user's PC and a provider regarding a modified example of the 
25 application download to IC card; 

FIG. 25 is a plan view showing the download application 
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selection screen! 

FIG. 26 is a flowchart for explaining the operation between a 
user's PC and a service applying company regarding the service 
providing process? 

FIG. 27 is a flowchart for explaining the operation between a 
user's PC and a service applying company regarding the service 
providing process relative to data distribution; 

FIG. 28 is an outline diagram showing the list of distribution 
services application to user; 

FIG. 29 is an outline diagram showing the list screen regarding 
the distribution forms and prices accompanied with the service 
application; 

FIG. 30 is a flowchart for explaining the operation between a 
user's PC and a service applying company regarding the service 
providing process relative to merchandise purchasing; 

FIG. 31 -FIG. 31C are diagrams showing data on the 
merchandise list screens; 

FIG. 32 is a flowchart for explaining a vote application 
download process to a main card; 

FIG. 33 is a flowchart for explaining a modified example of the 
vote application download process to IC card; 

FIG. 34 is a flowchart showing the outline of a vote process 
using an IC card with a vote application downloaded; and 

FIG. 35 is a flowchart for explaining the operation between a 
user's PC and a vote server 3. 
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DETAILED DESCRIPTION OF THE INVENTION 
Preferred embodiments of the present invention will be 
described below in detail referring to the attached drawings. 

An application download system A shown in FIG. 1 comprises a 
5 public communication network 1, for example, 

an internet, a public telephone network, ISDN, etc. which are 
connected with an application download provider 2, service applying 
company 3 (3a, ... 3n), a personal computer (hereinafter referred to 
as PC) at an end user side 4 and an IC card reader/writer 
10 (hereinafter, referred to as IC card reader/writer). 

An IC card 6 is set (inserted) on an IC card reader/writer 5 of a 
user B. The IC card 6 is distributed in advance as a main card 
storing individual data of user B from a main card delivering 
organization 7 after confirming the identify of user B. This IC card 
15 may be an IC card storing only initial data purchased by user B or 
delivered free charge from a store. 

As a main card distribution organization 7, public 
organizations or civil organizations such as a certification 
organization are considered. 
20 The system A in FIG. 1 is shown as such the structure related 

to the explanation described later is connected to a public 
communication network. However, actually 

many systems are connected to the public communication network 1 
when necessary. 

25 The application download provider 2 comprises plural 

application files 22, 23 and 24 that can be downloaded on the IC 
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card 6, a user registration database 25 for storing individual data 
registered from user B, a file controller 26, and an encrypting 
communication controller 27. 

As applications that can be downloaded on IC cards, there are a 
5 membership card application file for issuing a membership 

certificate of department stores, financial agencies, a loyalty point 
service application file 23 for 

receiving loyalty point services of stores, for example, department 
stores, super markets, etc., a vote application file 24 for making on- 

10 line voting as described later. 

These plural application files 22,23, 24 and the user 
registration data base 25 are connected to the file controller 26, 
which controls input/output of the files (plural application files 22, 
23, 24 and the user registration database 24) according to demands 

15 from user B. 

The encrypting communication controller 27 decodes coded 
data transmitted from the outside or codes data to be transmitted to 
the outside. The file controller 26 is connected to the public 
communication network 1 via the encrypting communication 

20 controller 27. 

The service applying company 3 (3a-3n) comprises a file 
controller 36, an encrypting communication controller 37, plural 
distribution service files 32, 33 storing various distribution services 
that are provided to users, a user registration database 35 storing 

25 individual data of registered users and a user list creation part 38 
as shown in FIG. 3. 
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The distribution service files 32, 33 and the user registration 
database 35 are connected to the file controller 36. This file 
controller 36 controls the input/output of files according to demand 
from user B. 

The encrypting communication controller 37 decodes coded 
data transmitted from the outside and codes data to be transmitted 
to the outside. The file controller 36 is connected to the public 
communication network such as internet, etc. via the encrypting 
communication controller 37. 

The user list creation part 38 processes and edits distribution 
services based on individual data stored in the user registration 
database 35 under the control of the file controller 36. 

Individual data of users who downloaded related applications 
periodically or as required from the application download provider 2 
is supplied to and stored in the user registration database 35. 

FIG. 4 is a schematic block diagram relative to the end user B 
side PC 4 and IC card reader/writer and mainly shows the IC card 
reader/writer control block diagram. If connectable to the site of the 
application download provider 2 via the public communication 
network 1, PC 4 is sufficient as described later, the explanation 
relative to PC 4 is omitted here. Further, when the IC card 
reader/writer 5 has a connecting function, PC 4 is not needed. 

As shown in FIG. 4, PC 4 is in such the construction that a 
privately owned PC is provided with the IC card reader/writer and is 
connectable to the public communication network 1. The IC card 
reader/writer is electrically connected to the IC card 6 via the 
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contact portion of the IC card 6 described later. The IC card 
reader/writer 5 comprises an IC card interface (hereinafter 
referred to as IC card I/F portion) 50, a voltage converting circuit for 
IC card driving 51, a controller 52 that has a built-in CPU for the 
entire control, a battery 53 as a power source, a ROM 54 for storing 
a control program, etc., a RAM 55 as a memory that is used as a 
working memory, and a communication controller interface 56 for 
controlling communication of data with the PC 4. 

FIG. 5 and FIG. 6 shows a modified example of the IC card 
reader/writer shown in FIG. 4 and a structure when handling 2 IC 
cards for the PC 4. FIG. 5 shows an example of the structure with 
two units of IC card reader/writer 5 connected to the PC 4 as two IC 
cards are treated. FIG. 6 shows an example of the structure with 
one unit of IC card reader/writer-provided with two insert ports so 
as to treat 2 sheets of IC card 6a and 6b connected to the PC 4. 

As shown in FIG. 7, the IC card 6 comprises a read/write 
section 61, such portions to execute the basic functions as a code set 
up/code collation unit 62 and an encrypting/decoding unit 63, and a 
supervisor 60 that controls these basic functions. 

The read/write section 61 reads/writes data from/to a data 
memory, etc. or erases data. The code setup/code collation unit 62 
performs the storing and readout prohibiting process of a code 
number that is set by a user, and after setting a code number, 
collates that code number with a code number that is input from an 
external device and approves the subsequent process. The 
encrypting/ decoding unit 63 performs the encrypting/decoding for 



12 



preventing leakage and forging of communication data exchanged 
between the IC card reader/writer 5 and the IC card 6. A 
supervisor 60 decodes a command code input from the IC card 
reader/writer 5 or a command code added to data for executing a 
program. 

As shown in FIG. 8, in order to display various functions as 
shown in FIG. 7, the IC card 6 comprises a controller element 64 
such as CPU, a data memory 65 that is a storage means, a program 
memory 66, a working memory 67 and a contact section 68 for the 
electrical contact with the IC card reader/writer 5. 

The controller element 64, the data memory 65, the program 
memory 66 and the working memory 6 are composed of a single IC 
chip (or multiple IC chips), respectively and embedded in the IC 
card body. 

The program memory 66 is made of, for example, a mask ROM 
and stores a control program of the controller element 64 provided 
with a subroutine to realize basic functions as described above. 
Further, this memory has a function to download an application 
program. 

The data memory 65 is used for storing applications and data 
and is composed of, for example such erasable non-volatile memory 
as EEPROM. The working memory 67 is a working memory for 
temporarily holding process data when the controller element 64 
executes the process and is composed of, for example, a volatile 
memory such as RAM, etc. 

The data memory 65 is divided into a control area 100, a 
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directory 101, an open area 102 and an area group 103 as shown in 
FIG. 9. The area group 103 is able to have plural data areas and 
key areas. Further, the area group 103 can be formed based on a 
concept called a data file (DF), and various downloaded application 
5 programs are grouped and stored for each DF. 

Individual data relative to a holder of the IC card 6 is stored in 
the EEPROM 65 as shown in FIG. 10. For example, such data as a 
person name (Hanako Toshiba) 103a, a date of birth (1970-3-3) 103b, 
a management number (98765) 103c, a phone number (02-1234- 
10 5678) 103d, a certification data 103e, a term of validity (2001-3-31) 
103f, a card identification data (00001) 103g, etc. are stored in this 
EEPROM 65. 

An acquiring (offering) route of the IC card 6 to a user B for 
use in the card application download system thus composed will be 

15 described referring to FIG. 11-FIG. 18. Further, in this 

embodiment, an IC card in which individual data of a card holder is 
pre-stored is called a main card 6a and an initialized IC card is 
called an affiliated card 6b. 

As shown in FIG. 11, user B enters individual data into a 

20 prescribed application form and applies the issue of a main card to a 
card issuing organization (ST10). Upon receipt of the application 
from user B, a main card delivering organization 7, checks the 
identity of user Based on the individual data contained in the 
application (ST11). 

25 When the identify of the user is confirmed as a result of the 

confirmation in Step 11 (ST12: YES), the main card 6a is issued 



14 



based on the contents of the application (ST13) and delivered to the 
user (ST14). Thus, User B is able to receive (acquire) the main 
card 6a that stores the own individual data (ST15). 

As shown in Fig. 12, the main card delivering organization 7 
5 issues the main card 6a (ST16) based on the individual data of a 
specific user pre-registered on a public organization and delivers to 
User B (ST17). Thus, User B is also able to receive (acquire) the 
main card 6a storing the own individual data (ST18). 

Next, FIG. 13-FIG. 18 are diagrams for explaining how to 
10 acquire (purchase) an affiliated card 6b by user B (a card holder). 

There are two routes to acquire an affiliated card as shown in 
FIG. 13 and FIG. 14. For example, the acquisition route shown in 
Fig. 13 is to purchase an affiliated card 6b on sale at a store by User 
B as shown in FIG. 15 (ST20). 
15 The acquisition route shown in FIG. 14 is to get an affiliated 

card 6b placed in a shop for free distribution 
as shown in Fig. 15 (ST21). 

This free distribution IC card has URL address data of a 
specific home page pre-stored on its surface or in an internal 
20 memory as shown in FIG. 16. 

On the affiliated card 6b, advertising URL may be set so that it 
is referred to by a user for a fixed time based on the URL address 
data stored in an internal memory when the affiliated card 6b is use 
in, for example, application downloading. 
25 Further, an IC card supplier for the affiliated cards 6b gets 

earnings from such advertising charges and is able to distribute the 
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cards no charge. 

User is able to print a desired images such as a character 77 
and an own photograph 76, etc. on the surface of IC card purchased 
or distributed no charge through the routes shown in FIG. 13 and 
FIG. 14 using a printer and customize the card surface as desired as 
shown in FIG. 18. 

Next, the outline of download processing of the application to 
an IC card well be explained using FIG. 19-FIG. 21. 

In this embodiment, a desired application is downloaded to the 
IC card using the user owned PC 4 and the IC card reader/writer 5, 
and the individual data of user B for using the application to an 
application provider and the IC card. 

As shown in FIG. 19, using the own PC 4, user B first accesses 
to the site of the application download provider 2 for downloading an 
application, and executes the user authentication using the main 
card 6a that is set in the IC card reader/writer 5 (ST30). 

When the user is properly authenticated, the open memory 
capacity of the main card 6 is checked to see if it is sufficient to 
download a desired application in the memory (ST31). When the 
open capacity is judged to be sufficient for download (ST32: YES), 
the download of application to the main card 6a is executed (ST33). 

When the download is normally completed, the user 
registration is executed to he download provider 2 (ST34). 
After completing the user registration normally, the application 
downloaded in the main card 6a is set in the operation mode and the 
usable state. Thus, the application downloading process is 
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completed (ST35). 

Next, the operation between the PC 4 of user B and a provider 
relative to the application downloading on the IC card explained in 
FIG. 19 will be described referring to FIG. 20 and FIG. 21. In this 
embodiment, an application program is downloaded on the main 
card 61. 

As shown in FIG. 20, first user B accesses the site of the 
application download provider 2 for downloading an application 
using own PC 4 (ST41). The file controller 26 transmits an 
application selecting screen data for download to the PC 4 in 
response to the access from the PC 4 (ST42). 

As shown in Fig. 25, the PC 4 displays the received data for 
downloading application selecting screen on a display, and urges 
selection of an application desired to download. On this selection 
screen, plural application names 81-85 that can be downloaded and 
a key 86 to direct the selection are displayed. 

On the application selection screen in this embodiment, there 
are arranged a "Members" key 81 for selecting a membership card 
application, a "Loyalty point service" key 82 for selecting the loyalty 
point service application, a "Vote" key 83 for selecting the vote 
application, and a "Selection complete" key 86 for directing the 
completion of the selection. 

User B selects the key for the application desired to download 
from these displayed application selection screens and, lastly 
depresses the "Selection complete" key 86 (ST43). When the 
"Selection complete" key 86 is depressed, the PC 4 will notify the 
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information indicating the selected application name to the provider 
2 (ST44). 

Further, it is also possible to select plural applications at a time. 

When the notice of the selected application is received from the 
5 PC 4, the provider 2 demands the PC 4 to present the main card 6a 

of user B 6a for the justifiability confirmation process (ST45). 

When the demand for presenting the main card 6a is received, the 

PC 4 checks whether the main card 6a is inserted into the connected 

(or built in) IC card reader/writer 5 connected (ST46). 
10 When it is detected that the main card 6a was not inserted in 

Step ST46 (ST47*. NO), the PC 4 displays a message showing the 

insertion of the main card to the uUser B on the display (ST48). 

When the main card 6a is inserted in Step ST46 (ST47: YES), the IC 

card reader/writer 5 reads out the stored authentication information 
15 from the main card 6a that is set therein, and transmits it to the 

provider 2 via the PC 4 (ST49). 

When the authentication information is received from the PC 

4, the file controller 26 of the provider 2 executes the authentication 

process relative to the main card 6a, and checks the justifiability of 
20 the main card 6a (ST50). When the main card 6a is judged not to 

be justifiable as a result of the check in Step ST50 (ST51: NO), the 

file controller 26 displays an error message 

(ST56) and returns to Step ST42. 

When the main card 6a is confirmed to be justifiable in Step 
25 ST50 (ST51: YES), the file controller 26 of the 

provider 2 demands the PC 4 to present a PIN (Personal 
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Certification Number) of user B (ST52) in order to confirm the 
individual justifiability of user B. 

When the demand for presenting the PIN information is 
received, the PC 4 urges user B to input the PIN information. 
5 When the PIN information is input from the input portion of a 

keyboard (not illustrated) by user B, the PC 4 transmits the input 
PIN information to the provider 2 (ST53). 

When the PIN information is received from the PC 4, the file 
controller 26 of the provider 2 executes the collation process relative 
10 to the PIN information and checks the individual justifiability of 
user B (ST54). 

When user B is judged not to be justifiable as a result of the check 
in Step ST54 (ST55: NO), the file controller 26 displays an error 
message (ST56) and returns to Step ST42. 
15 When user B is confirmed to be justifiable in Step 54 (ST55: 

YES), the file controller 26 of the provider 2 transmits the memory 
capacity data required for downloading selected applications and a 
direction for checking the capacity of the main card 6a to the PC 4 in 
Step ST44 (ST56). 

20 When the direction for checking the capacity of the main card 

6a is received, the PC 4 compares the open capacity of the main card 
6a with the received required memory capacity data using the IC 
card reader/writer 5. 

By this comparison, the PC 4 judges whether the application 
25 program selected by the set main card 6a can be downloaded (ST57). 
When it is revealed that the download is not feasible as a 
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result of the checking of the open capacity in Step ST57 (ST58: NO), 
a series of processing are suspended. 

Further, when judged that the download is possible(the open 
capacity is sufficient) (ST58: YES), the PC4 transmits a notification 
that the download is possible to the provider 2 (ST59). 

When notified that the download is possible, the file controller 
26 of the provider 2 executes the download of the selected 
application (ST60). Further, in the PC 4 the application program 
sent from the provider 2 is downloaded on the main card 6a that is 
set via the IC card reader/writer (ST61). When the program 
download is completed properly in Step 61, the PC 4 transmits the 
completion of the proper registration of the application to the 
provider 2 (ST62). 

In this embodiment, the application downloaded in Step 61 
cannot be used in this state. Therefore, when the application is 
properly downloaded, the file controller 26 of the provider 2 
transmits the individual data registration screen (not shown) to the 

PC 4 and requests the input of individual data so that the 

application can be used (ST63). 

The PC 4 displays the received individual data registration 

screen on the display and urges the input of individual data. When 

individual data required for the card issue is input through the 

input device (not shown)) by user B, the PC 4 transmits the input 

individual data to the provider 2 (ST64). 

When the individual data is received, the file controller 26 of 

the provider 2 makes the user registration on a user registration 
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database 25 (ST65). When the user registration is normally 
completed, the provider 2 transmits the registration data associated 
with the user registration to the PC 4 (ST66). 

In the PC 4, when the registration data is received, the received 
5 registration data is written on the main card 6a set by the IC card 
reader/writer 5. When the registration data is written into the 
main card 6a, the application program downloaded in the main card 
6a is switched to the operation mode and the program becomes 
usable (ST67). 

10 When the registration data is properly written on the main 

card 6a, the PC 4 notifies the provider 2 of the completion of 
registration on the main card 6a (ST68). When the notice of 
completion of this registration is received, the provider 2 judges that 
the downloaded application issue process (the process to make it 

15 usable) is properly completed and terminates a series of download 
operations (ST69). 

In this embodiment, the capacity check is carried out with the 
PC 4 of user B. However, this check is not restricted to this but can 
be executed at the provider 2. 

20 In this embodiment, an application desired by user is 

downloaded on a sheet of IC card 6 by the user using own PC 4. 
Accordingly, an individual is able to create a multi-application card 
easily. 

Further, it is also no longer needed for a service applying 
25 company to go to a prescribed issuing place in order to issue service 
applications but can provide services without geographical 
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restriction. 

Further, applications are downloaded on the main card 6a 
including individual data after authenticate it. Further, the 
application downloaded on the card becomes usable only after 
individual data is registered. Therefore, applications can be 
downloaded on regular cards only and for service applying 
companies it is possible to prevent illegal download by illegal access. 

Next, the outline of the modified example of the application 
download process on an IC card is explained using Fig. 22-Fig. 24. 

In this embodiment, as an IC card on which an application 
program is downloaded, the program is first downloaded on the main 
card 6a. Further, if an application program cannot be downloaded 
for the insufficient open capacity of a memory of a main card, the 
program is downloaded on an affiliated card 6b. Further, it is also 
possible to set an affiliated card 6b from the beginning and 
download an application on the affiliated card 6b. 

As shown in FIG. 22, user B first accesses the site of the 
application download provider 2 for downloading an application 
using own PC 4, and executes the user authentication using the 
main card 6a that is set in the IC card reader/writer 5 (ST71). 

When the user authentication is completed properly, a card on 
which an application is downloaded is set in the PC (ST72). When 
a card is set, the open capacity of a download memory of the IC card 
6 is checked to see if a desired application can be loaded in the 
memory (ST73). 

At this time, when the open capacity is judged sufficient for 
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downloading, the kind of IC card 6 that is set for the downloading is 
discriminated. When it is the main card 6a, proceed to Step ST75. 
When the set IC card 6 is not the main card 6a, the link data of the 
main card 6a is registered on the IC card 6 on which the data is 
downloaded, and an affiliated card 6b is created (ST75). 

In general, any information specifying individual data is not 
stored in general purpose IC cards that are available at a market or 
free distributed. Even if stored, they are not registered on a legal 
organization. Accordingly, it is not possible to specify an owner of a 
general purpose IC card. 

When false certification data (that is, the link data referred to 
in this embodiment) is created using such certification data as 
certification data, etc. of the main card 6a for specifying an 
individual who is registered on an legal organization and stored in 
such a general purpose IC card, it is possible to make it a card 
ensuring an owner likewise the main card 6a. 

When an IC card (the main card 6a or the affiliated card 6b 
storing the link data with the main card 6a) is prepared in Steps 
ST74 and ST75, the downloading of an application is executed 
(AR76). When the downloading is normally completed, the user 
registration is made to the download provider 2 (ST77). When the 
user registration is completed normally, the application downloaded 
on the IC card 6 is set in the operation mode and the application is 
turned to the usable state, and the application downloading process 
is completed (ST78). 

Next, the detailed operation between the PC 4 of user B and 
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the provider 2 relative to the modified example of the application 
download process to IC card explained in FIG. 22 will be described 
referring to FIG. 23 and FIG. 24. In this embodiment, an 
application is first downloaded on the main card 6a. Therefore, the 
5 process at first becomes the same as that shown in FIG. 20 and the 
explanation is omitted. 

The site of the application download provider 2 is accessed, a 
desired application for download is selected, and when the 
certification process of the main card 6a and the collation process of 
10 user B are completed, proceeds to the process shown in FIG. 23. 

When justifiability of both the main card 6a itself and user B is 
confirmed (up to ST 55), the file controller 26 of the provider 2 
demands the setting of an application downloading card in the PC 4 
(ST80). 

15 When the downloading card setting demand is received, the PC 

4 indicates it on the display and urges user B to insert the card. 
When the IC card 6 is set, the IC card reader/writer 5 reads out the 
certification data and the open capacity data of the memory from the 
IC card 6 and transmits to the provider (ST81). 

20 When the open memory capacity data is received, the file 

controller 26 of the provider 2 compares the received memory open 
capacity with a memory capacity required for downloading an 
application selected in Step ST44 and judges whether it is possible 
to download the application program selected by the set IC card 6 

25 (ST82 and ST83). 

When the file controller 26 judges the download is possible in 
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Step ST82 (ST83: YES), the operation goes to the process in ST88. 
When the download is judged to be not possible in Step ST82 (the 
open capacity is insufficient) (ST83: NO), the file controller 26 of the 
provider 2 transmits a demand to the PC 4 to set another card 
(ST84). / 

When the demand for setting another download card for the 
insufficient memory capacity, the PC 4 indicates it on the display 
and urges user B to insert another card. When another IC card 6 is 
set, the IC card reader/writer 5 reads out the certification data and 
the open capacity of the memory from the set IC card and transmits 
them to the provider 2 (ST85). 

When the data of the memory open capacity is received, the file 
controller 26 of the provider 2 compares the received memory open 
capacity with the memory capacity required for downloading the 
application selected in Step 44 and judges whether it is possible to 
download the selected application program on the set IC card 6 
(ST86 and ST87). 

When the download is judged not possible in Step ST86 (for the 
insufficient open capacity) in Step ST86 (ST87: NO), the file 
controller 26 returns to the process in Step ST84 and transmits a 
setting request of another card again. Further, when the download 
is judge possible in Step ST86 (ST87: YES), the file controller 26 of 
the provider 2 judges whether the set IC card 6 is the main card 6a. 

That is, when the IC card 6 that is set for the downloading is 
judged to be the main card 6a from the certification data received 
together with the open capacity data (ST88: YES), the file controller 
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26 proceeds to Step ST60 shown in FIG. 24. Further, when the IC 
card 6 is judged not to be the main card 6a in Step ST88 (ST88: NO), 
the file controller 26 checks whether the card is the affiliated card 
6b already link processed with the main card 6a from the 
certification data (ST89). 

When the set IC card 6 is judged to be the affiliated card 6b 
already link processed with the main card 6a in Step ST89 (ST90), 
the file controller 26 proceeds to Step ST60 shown in FIG. 24. 
Further, when it is judged not to be the link processed affiliated 
card 6B link processed in Step ST89 (ST90: NO), the file controller 
26 creases the link data based on the certification data of the main 
card 6a that is already certified in Step ST50 and transmits it to the 
PC 4 (ST91). 

When the link data is received from the provider 2, the PC 4 
writes the link data on the IC card 6 set in the IC card reader/writer 
5 and executes the link process of the affiliated card 6b (ST92). 
Then, when the link data writing is completed normally, the PC 4 so 
notifies the provider 2 (ST93). 

Further, when the card that is set for the downloading is the 
main card 6a from the judgment in Step ST88 or the already link 
processed affiliated card 6b from the judgment in Step 91 or further, 
when the completion of the link data writing is completed normally 
in Step ST93 is received, the file controller 26 of the provider 2 
executes the downloading of the selected application (ST60-ST62). 
The process after Step ST60 is the same as that shown in FIG. 21 
and therefore, the explanation is omitted. 
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That is, when the program downloads in Step ST60-ST62 are 
completed, individual data required for the card issue is input by 
user B and the user registration to the provider 2 is executed (ST63- 
ST65). When the user registration is completed normally, the 
application program downloaded in the IC card 6 is set in the 
operation mode to make it usable (ST66-ST69). 

In this embodiment, an application is downloaded not only on 
the main card 6a storing individual data but also on a general- 
purpose IC card 6. Accordingly, an individual person is able to 
create a multiple application card easily. Further, for service 
applying companies it becomes possible to provide many service 
applications on a single sheet of card without restriction. 

Further, false certification data (link data) is created using 
certification data of the main card 6a for specifying an individual 
registered for a legal organizations, such as certification data of the 
main card 6a and stored in a general-purpose IC. For this reason, a 
general -purpose card can be made to a card which guarantees an 
owner likewise the main card 6a, and as application can be 
downloaded only on a legal or semi-legal card, the illegal download 
by illegal access can be prevented. 

Next, the outline of the service offer processing using an IC 
card with a downloaded application will be explained using FIG. 26- 
FIG. 31. 

As shown in FIG. 26, user B first sets an IC card 6 with a 
downloaded application (hereinafter, a main card 6a and an 
affiliated card 6b are included in the explanation) in the IC card 
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reader/writer 5. User B accesses the site of the service applying 
company 3 using own PC 4 to get services (ST101). In response to 
the access from the PC 4, a file controller 36 of the service applying 
company 3 transmits service screen data and a demand for data of a 
using card to the PC 4 (ST102). 

The PC 4 displays the received service screen data on a display. 
Further, the certification data on the set IC card 6 is read hy the IC 
card reader/writer 5 and notifies to the service applying company 3 
via the PC 4 (ST103). 

When receiving the notification of the card identification data 
from the PC 4, the file controller 36 of the service applying company 
3 checks whether the user accessed is a member by searching the 
database for user registration based on the received card 
identification data (ST104). 

When the accessed user is judged to be a member in Step 
ST104 (ST105: YES), services that are described later are provided 
(ST109). When the accessed user is judged to be not a member in 
Step ST104 (ST105: NO), the controller 36 notifies the user B to 
download a service providing application on the card and execute 
the member registration (ST108). 

FIG. 27-Fig. 29 are a flowchart and diagrams one example of 
the service providing process explained in FIG. 26. 

As shown in FIG. 27, user B first sets an IC card 6 with an 
application downloaded (hereafter both a main card 6a and an 
affiliated card 6b are included in the explanation) in the IC 
reader/writer 5. And user B accesses the site of the service 
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applying company 3 which is a data distribution company using own 
PC 4 (ST111). 

In response to the access from the PC 4, the file controller 36 
of the service applying company 3 transmits the distribution service 
5 list screen data shown in FIG. 28A and a demand for the card 
information to be used to the PC 4 (ST112). 

The PC 4 displays the received list screen data on a display. 
Further, the certification data of the set IC card 6 is read by the IC 
card reader/writer 5 and notified to the service applying company 3 
10 via the PC 4 (ST113). 

When the notice of the card identification data is received from 
the PC 4, the file controller 36 of the service applying company 3 
searches the user registration database 35 based on the received 
card identification data and checks whether the accessed user is a 
15 member (ST114). When the user is judged being not a member in 

Step ST104 (ST115: NO), a screen to urge the member registration is 
shown on the display of PC 4 and a series of processing is 
terminated (ST116). 

When the user is judged being a member in Step ST114 (ST115: 
20 YES), the file controller 36 edits contents of the distribution service 
in a user list creation part 38 based on the member data pre- 
registered on the user registration database 35. Then, the edited 
distribution service list screen as shown in FIG. 28B is transmitted 
(ST117). 

25 The PC 4 displays the received list screen data on the display 

and urges the user B to select a desired specific data (ST118). 
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When the user B selects a desired data from the displayed list 
screen, the PC 4 notifies the selected data to the service applying 
company 3 (ST119). 

When the selected data is received, the file controller 36 of the 
service applying company 3 transmits the distribution form for 
providing the service and the list screen data relative to prices 
shown in FIG. 29 to the PC 4 (ST120). 

The PC 4 displays the received list screen data on the display 
and urges the user B to select a desired distribution form. When 
the user B selects a desired distribution form from the displayed list 
screen, the PC 4 notifies the selected data to the service applying 
company 3 (ST121). 

Here, in this embodiment, two forms of the "Purchase" or 
"Rental" of the selected data are shown as the distribution form. In 
the case of the rental, it is so set that when the prescribed rental 
period is over, the provided data will no longer be used. 

When the data selected in Step ST121 is received, the file 
controller 36 of the service applying company 3 transmits the data 
selected in Step ST119 to the PC 4 corresponding to the selected 
distribution form. At this time, when "Purchase" is selected, the 
selected data (for example, music data) only is provided to the user 
B. Further, when "Rental" is selected, at least the date information 
is provided to the user B as the terms of validity in addition to the 
selected data (for example, music data) (ST122). 

In the PC 4, the data sent from the service applying company 3 
(for example, music data only or music information plus the date 
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information, etc.) is written into the IC card 6 that is set via the IC 
card reader/writer 5(ST123). When the writing of the provided 
data is completed normally in Step ST123, the PC 4 notifies the 
service applying company 3 of the normal completion of the data 
5 writing (ST124). When the notice of completion is received from 
the PC 4, the service applying company 3 stores the distribution 
information provided this time in the user registration database 35 
for user's registration, and completes a series of processing (ST125). 
In this embodiment, when the service applying company 3 is 

10 accessed and a prescribed application is downloaded, it is judged 

whether the user is a member having the right to receive the service 
based on the data from the IC card. Therefore, for the user it is 
possible to notify that the user is a member without performing such 
complicated works as input of individual data, etc. For the service 

15 applying company it is possible to prevent an illegal (impersonate) 
access. 

Further, in this embodiment, when a user is judged being a 
member based on the data from an IC card, the contents of 
distribution service are automatically edited and provided based on 

20 the personal data at the time of member registration or accumulated 
through the service provided in the past. Therefore, for a user it is 
possible to efficiently select a highly desirable service a lot of 
services provided. 

Further, in this embodiment, there are two types of service 

25 distribution forms; "Purchase" form to provide distribution data 
indefinitely and "Rental" form to provide distribution data with the 
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restricted term. When the "Rental" form is selected, distribution 
data is provided with the usable date information attached. 
Therefore, for a user it is possible to use latest data for a 
prescribed period only while using a memory in restricted capacity 
5 and effectively use a less memory capacity. Further, for a service 
applying company it is possible to provide distribution data safely 
without being improperly used. 

Next, an example of the service providing process explained in 
FIG. 26 will be described referring to FIG. 30 and FIG. 31. 

10 As shown in FIG. 30, the user B first sets the IC card 6 with an 

application downloaded (hereafter both the main card 6a and the 
affiliated card 6b are included) in the IC card reader/writer 5. 
Then, the user B accesses the site of the service applying company 3 
that provides merchandises desirable to buy using own PC 4. 

15 (ST130). 

In response to the access from the PC 4, the file controller 36 
of the service applying company 3 transmits the demand for the 
merchandise list screen data as shown in FIG. 31A and FIG. 3 IB, 
and the card data to be used to the PC 4 (ST131). 

20 The PC 4 displays the received list screen data on the display. 

Further, the PC 4 reads the certification data of the IC card 6 that is 
set by the IC card reader/writer 5 and notifies this certification data 
to the service applying company 3 via the PC 4 (ST132). 

In response to the notice of the card identification data from 

25 the PC 4, the file controller 36 of the card applying company 3 

checks whether an accessed user is a member by searching the user 
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registration database 35 based on the received card identification 
data (ST133). 

When a user is judged not being a member in Step ST133 
(ST134: NO), the screen to urge the member registration is shown 
on the display of the PC 4, and a series of processing is terminated 
(ST135). 

When a user is judged being a member in Step ST133 (ST134- 
YES), the file controller 36 edits contents of merchandises by the 
user list creation part 38 based on the member data (for example, 
size data, etc.) pre-registered in the user registration database 35. 
Then, the edited merchandise list screen as shown in FIG. 31C is 
transmitted (ST136). 

The PC 4 displays the received list screen data on the display, 
and urges the user B to select a desired merchandises (ST137). 
When a merchandise is selected from this displayed list screen by 
the user B, the PC 4 notifies a purchase direction of the selected 
merchandise to the service applying company 3 (ST138). 

When the selected merchandise data is received, the 
the file controller 36 of the service applying company 3 executes the 
registration/delivery arrangement of merchandise directed to 
purchase to a prescribed database and notifies the completion of the 
registration to the PC 4 (ST139). When the completion of 
registration is notified, the PC 4 completes the access (ST140). 

Next, the outline of the process to download an IC card vote 
application and the vote process using the IC card with the vote 
application downloaded will be described using FIG. 32-FIG. 35. 
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As shown in FIG. 32, the user B first accesses the site of the 
application download provider 2 for downloading an application 
relative to the vote using own PC 4 (ST141). 

When the PC 4 is connected to the site, the download 
application selecting screen is transmitted to the PC 4. The user B 
selects a vote application desired to download from the application 
selection screen displayed on the PC 4, and directs it to the provider 
2 (ST142). 

When the direction in Step ST142 is received, the file 
controller 26 of the provider 2 judges whether the selected vote 
application is a period that can be downloaded (ST143). That is, for 
"Vote", a voting day (or a period) is generally pre-determined. 
Therefore, even when the vote application is downloaded, it becomes 
useless because the voting cannot be made when a vote date (a 
period) is over. 

Therefore, in this embodiment, the period for downloading the 
vote application is restricted up to the day before the preset vote 
day (a period). 

In Step ST143, the date directed for selecting the vote 
application downloading is judged whether it is the day before the 
vote day. When judged that the application cannot be downloaded in 
Step ST143, for example, it is after the voting day (the period), the 
file controller 26 of the provider 2 notifies the user B (PC4) that the 
application cannot be downloaded, and a series of processing are 
stopped (ST150). 

Further, when judged that the application can be downloaded 
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in that period in Step ST143, the provider 2 demands the PC 4 to 
present the main card 6a of the user B for the justifiability checking 
process. In response to the demand for presenting the main card 6a, 
the PC 4 reads out the certification data from the main card 6a 
inserted in the IC card reader/writer 5 connected (or built-in), and 
transmits this certification data to the provider 2 (ST144). 

When the certification data is received from the PC 4, the file 
controller 26 of the provider 2 executes the certification process 
relative to the main card 6a and checks justifiability of the main 
card 6a (ST145). When the main card 6a is judged not proper as a 
result of the check in Step ST145, a series of processing are 
suspended. 

When justifiability of the main card 6a is confirmed in Step 
ST145, the file controller 26 demands the PC 4 to 
present the PIN data of the user B in order to check individual 
justifiability of the user B (whether the voting right is retained). 
In response to the demand for presentation of PIN data the PC 4 
urges 4 the user B to input PIN data, and transmits the PIN data 
input by the user B to the provider 2. 

When the PIN data is received from the PC 4, the file 
controller 26 of the provider 2 executes the collation process relative 
to the PIN data, and checks individual justifiability of the user B 
(ST146). When the user B is judged not being justifiable (retains 
no voting right) as a result of the check in Step ST146, a series of 
processing are terminated. 

When it is confirmed that the user B is justifiable and has the 
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voting right in Step ST146, the file controller 26 of the provider 2 
checks whether the voting application selected in Step ST142 can be 
downloaded and what is the open capacity of the memory of the 
main card 6 (ST147). Further, the checking operation of the open 
5 capacity of the memory of the actual main card may be executed by 
the provider 2 or by the PC 4 6a (the IC card reader/writer 5). 

When it is detected that the downloading of the application is 
not possible (the open capacity is insufficient) (ST148: NO) as a 
result of the checking of the open capacity in Step ST147, the user B 
10 (PC 4) is so notified and a series of processing are terminated 
(ST150). 

When the download is judged possible (ST148: YES), the file 
controller 26 of the provider 2 executes the download of the selected 
vote application to the main card 6a of the user B. Further, the PC 

15 4 writes the vote application program sent from the provider 2 in 
the main card 6a that is set by the IC card reader/writer 5 (ST149). 

When the program download is completed normally in Step 
ST149, the PC 4 notifies a provider 2 of the normal completion of the 
vote application registration. When the normal completion of the is 

20 notified, the provider 2 sets in the usable state by setting the vote 
application downloaded in the main card 6 in the operation mode 
and terminated the application downloading process (ST151). 

In this embodiment, an application relative to the voting is 
downloaded on the main card 6a in which an individual data 

25 registered on a public organization is pre-stored. Therefore, it is 
possible to prevent the illegal downloading of the vote application. 
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Further, it is possible to overcome the geographical influence related 
to a voting paper, the notice of an application, etc. 

Further, the period during which the vote application can be 
downloaded is restricted. In particular, in this embodiment, it is so 
5 constructed that a voting application can be downloaded up to the 
day before a voting date (period). Therefore, it is possible to 
prevent the system down due to the concentrated access and 
minimize the influence to the voting. 

Next, the modified example of the download processing shown 
10 in FIG. 32 will be explained using FIG. 33. In this embodiment, a 
vote application program is first downloaded on the main card 6a. 
Further, if the memory open capacity of the main card is insufficient 
and the application program cannot be downloaded, the application 
program is downloaded on the affiliated card 6b. 
15 Further, it is also possible to set an affiliated card 6b from the 

beginning and download the application program on the affiliated 
card 6b. Further, up to the certification process of the main card 6a 
in Step ST145 and the PIN collation process of the user B in Step 
ST146, the processes are the same as those in the embodiment 
20 shown in FIG. 32 and therefore, the explanation thereof will be 
omitted. 

That is, when the site of the application download provider 2 
is accessed (ST141), the vote application desired for downloading is 
selected, and the period is that in which the vote application can be 
25 downloaded, the certification process of the main card 6a (ST145) 

and the collation process of the user B (ST146) are executed and the 
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step proceeds to the process shown in FIG. 33. 

When justifiability of the main card 6a is confirmed in ST145 
and justifiability of the user B checked confirmed in ST146 as shown 
in Fig. 33, a provider's 2 file control part 26 will require the set of 
the card for application download from PC4 (ST161). 

The open capacity of the memory of the set IC card 6 is checked 
to see whether the vote application chosen selected in Step ST142 
can be downloaded (ST162). Further, the open memory capacity of 
the actual IC card 6 may be checked at the provider 2 or the PC 4 
(IC card reader/writer 5). 

When it is judged that the vote application cannot be 
downloaded in Step ST162 (ST163: NO), the file controller 26 of the 
provider 2 transmits a demand to set another card to the PC 4 
(ST164). When receiving a demand to set another card for 
downloading due to insufficient memory capacity, the PC 4 displays 
it on the display and urges the user B to insert another card. When 
another IC card is set, the memory capacity of the set IC card is 
checked similarly (ST 16 2). 

When it is judged possible to download the vote application in 
Step ST162 (ST163: YES), the file controller 26 of the provider 2 
judges whether the set IC card 6 is the main card 6a (ST165). 
Further, when it is judged in Step ST165 that the set card is not the 
main card 6a (ST165: NO), the card is further checked whether it is 
an affiliated card 6b that was already link processed with the main 
card 6a (ST166). 

When judged that the card is not a link processed affiliated 
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card 6b in Step ST166 (ST166: NO), the file controller 26 of the 
provider 2 creates link data based on the certification data of the 
already certified main card 6a in ST145 and transmits the data to 
the PC 4. When the link data is received from the provider 2, the PC 
5 4 writes the link data into the IC card 6 set in the IC card 

reader/writer 5 and executes the link process of the affiliated card 
6b (ST167). 

When the IC card 6 set for the downloading is judged as the 
main card 6a in Step ST165 (ST165: YES), the set IC card 6 is 
10 judged as the affiliated card 6b that was already link processed with 
the main card 6a in Step ST166 (ST166: YES) and the link data was 
normally written in Step ST167, the file controller 26 of the provider 
2 executes the downloading of the vote application (ST168). 

Then, when the program download is completed in Step ST168, 
15 the file controller 26 of the provider 2 makes the application 
program downloaded in the IC card 6 usable by setting the 
application program in the operation mode (ST169). 

In this embodiment, the vote application is downloaded in not 
only the main card 6a storing individual data but also in a general 
20 purpose IC card 6. As a result, the using range of a single sheet of 
IC card (the main card 6a) in less memory capacity is not restricted 
and more services can be provided to users. 

Next, the outline of the voting process by the IC card with the 
vote application downloaded will be described referring to FIG. 34 
25 and FIG. 35. 

As shown in FIG. 34, the user B first sets an IC card with the 
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vote application downloaded (hereinafter, both the main card 6a and 
the affiliated card 6b are included in the explanation) in the IC card 
reader/writer 5. Then, the user B accesses the site of the vote 
server 3 for making the voting using own PC 4 (ST180). In 
response to the access from the PC 4,, the file controller 36 of the 
vote server 3 transmits the information on a candidates list screen 
to the PC 4 (ST181). 

The data of the received candidates list screen is displayed on a 
display. When a candidate is selected by the user from the input 
portion of the PC 4, the PC 4 reads out the data relative to the vote 
application of the IC card 6 set by the IC card reader/writer 5, and 
notifies (the voting) the data of the selected candidate and the 
identification data of the card 6 to the vote server 3 (ST182). 

In the vote server 3, justifiability of the vote application 
program is checked from the data regarding the received vote 
application (ST183). When justifiability of the application program 
is confirmed, in order to check whether the main card 6a has the 
voting right, the certification process is executed using the main 
card 6a (ST184). 

When the main card 6a is judged to be the right card 
in Step ST184, the PIN collation process is executed to check 
whether a user (voter) is a right owner of the main card 6a (ST185). 
When all of the vote application program, the main card 6a and user 
(voter) B are confirmed to be justifiable as described above, the vote 
server 3 accepts the vote formally based on the candidate data 
received in Step ST182 (ST186). 
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When the vote is formally accepted in Step ST 186, the vote 
server 3 invalidates (eliminates, etc.) the vote application from the 
IC card 6 with the vote application downloaded so that the vote 
application is no longer used (ST187). 
5 As shown in FIG. 35, user B first sets the application 

downloaded IC card 6 (hereinafter, both the main card 6a and the 
affiliated card 6b are included in the explanation) in the IC card 
reader/writer 5. Then, user B accesses the electronic voting site of 
the vote server 3 using own PC 4 (ST190). 

10 In response to the access from the PC 4, the file controller 36 

of the vote server 3 transmits a demand for the candidate list screen 
data and the card data that is used as I.D. to the PC 4 (ST191). 

The PC 4 displays the data of the received candidate list screen 
on the display, and urges user B to select (vote) a candidate (ST192). 

15 Further, reads the certification data of the vote application loaded in 
the IC card 6 set by the IC card reader/writer 5 integrated circuit 
card R/W5 is read. When a candidate data is selected from the 
displayed list screen (not shown) by the user B, the PC 4 notifies the 
vote server 3 of the selected candidate data and the application 

20 certification data of the IC card (ST193). 

The file controller 36 of the vote server 3 stores the received 
candidate data temporarily and checks the certification data of the 
received vote application to see whether it is a proper application 
(ST194). Here, when it is judged that the vote application is not a 

25 proper application (ST195- NO), a series of processing are stopped 
(ST204). When it is judged being not proper (ST195: YES), the file 
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controller 36 of the vote server 3 will demands the card 
identification data to the PC 4 (ST196). 

In response to the demand in Step ST196, the card 
identification data stored in the IC card 6 set by the IC card 
5 reader/writer 5 is read and transmitted to the vote server 3 via the 
PC 4 (ST197). When the certification data is received from the PC 
4, the file controller 36 of the vote server 3 executes the certification 
process relative to the IC card 6, and checks justifiability of the IC 
card 6 (ST198). When the IC card 6 is judged to be not proper as a 
10 result of the check in Step ST198 (ST199: NO), a series of processing 
are stopped (ST204). 

When justifiability of the IC card 6 is confirmed in Step ST198 
(ST199: YES), the file controller 36 of the vote server 3 demands the 
PC 4 to present PIN data of the user B for checking justifiability of 
15 the user B (ST200). 

When the demand for presenting the PIN data is received, the 
PC 4 urges the user B to input the PIN data. When the PIN data is 
input through a keyboard (not shown) by the user B, the PC 4 
transmits the input PIN to the vote server 3 (ST201). 
20 When the PIN data is received from the PC 4, the file 

controller 36 of the vote server 3 executes the collation process 
relative to the PIN information, and checks justifiability of the user 
B (ST202). When the user B is judged to be not justifiable as a 
result of the check in Step ST202 (ST203: NO), a series of processing 
25 are stopped (ST204). 

When justifiability of the user B is confirmed in Step ST202 
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(ST203: YES), the file controller 36 of the vote server 3 formally 
accepts the candidate data that was received and stored temporarily 
in Step ST194 (ST205). When the vote acceptance is completed, the 
PC 4 is notified of the completion of the vote acceptance (ST206). 
5 When the notice of the vote acceptance completion is received, 

the PC 4 invalidates the vote application in the IC card 6 that is set 
by the IC card reader/writer 5 (ST207). Particularly, as a 
invalidation process of the applications downloaded in the IC card 6, 
it is considered to eliminate the vote application program in the IC 

10 card 6 with the IC card reader/writer 5. Further, it is also 
considered to rewrite a flag, etc. so that the vote application 
program in the IC card 6 is considered unusable by the IC card 
reader/writer 5. 

In this embodiment, when all of the application program, the 

15 master card 6a retained by the voter and the voter are confirmed 
justifiable, the vote is formally accepted. Therefore, it is possible 
to prevent illegal voting. 

In this embodiment, when the vote is formally accepted, the IC 
card with the vote application program downloaded is applied with 

20 the process to invalidate the vote application. Accordingly, the 
voting can be made only one time and the illegal voting can be 
prevented. 

As described above, according to the present invention, it is 
possible to obtain an individual specific card easily and download 
25 plural applications in a single card as desired by a card holder. 
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